SSRF in Significant-gravitas Autogpt
CVE-2025-62616
AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. Prior to autogpt-platform-beta-v0.6.34, in SendDiscordFileBlock, the third-party library aioht…
Vulnerability class: SSRF (Server-Side Request Forgery)
EPSS: 0.001 (24.4th percentile) — read the EPSS interpretation.
Affected products
- Significant-gravitas Autogpt — versions < autogpt-platform-beta-v0.6.34
Weakness classification (CWE)
References
- https://github.com/Significant-Gravitas/AutoGPT/security/advisories/GHSA-ggc4-4fmm-9hmc (x_refsource_CONFIRM)